CVE-2026-62830

CriticalCVSS 9.9

Published: 07/08/2026(UTC)Updated: 24/10/2026(UTC)Translated: 07/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.78%

56th percentile - higher than 56% of all known CVEs

Summary

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Risk Assessment

An authorized attacker can gain elevated privileges, potentially leading to unauthorized access to Azure resources and compromise of infrastructure security.

Recommendation

Apply security updates provided by Microsoft for Azure SRE Agent and restrict user permissions to the minimum required.

Other vulnerabilities in Azure SRE Agent

See all

CVE-2026-69435Critical
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
CVE-2026-32173High
Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Original NVD description (English source)

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS